Thanks to an article by Skippy, and considerable time staring at Postfix, The Definitive Guide, I’ve gotten a whitelisting system set up for my daughter. She can now receive email from a very select list of addresses. Anyone else gets rejected.
The second part is to get a whitelisting proxy server set up for her.
The goal is to give her her own computer for her birthday, but to make it completely internet-proofed. I want her to be able to go to her favorite websites, but not to other places.
And, no, I’m not interested in your remarks about how overprotective I am, or how I’m stunting her ability to learn, so don’t even bother.
I briefly considered using Squid, but I think I’ll try to do it with mod_proxy first. Probably not ideal, but I figure you should eat your own dogfood whenever possible.